Back Securityaffairs.Co

Alleged Żabka Breach Exposes Jira Data, Source Code, and API Keys

Securityaffairs.Co •Pierluigi Paganini • August 3, 2026

Alleged Żabka data leak offered for €5,000 includes Jira data, GitLab repos, and secrets; researchers verified much of the sample. A brand-new forum account showed up on August 2, posted once, and asked five grand for what it claims is a full data dump from Żabka Polska. Żabka Polska is Poland’s largest convenience store operator […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Żabka Polska Cyberattack Exposes Employee Data and Source Code for Sale Żabka Polska, Poland's largest convenience store chain, confirmed a cyberattack involving unauthorized access to its network. The breach was detected through an external service provider, and the company reported that transactional data and business operations remain secure. However, a threat actor is advertising a dataset for €5,000, claiming it includes internal employee records, confidential project documentation, source code, and credentials for production systems. The compromised data reportedly includes full names, corporate email addresses, JIRA usernames, and details from over 541,000 JIRA issues. The seller also claims to have accessed 89 internal source-code repositories and various operational system records, including those from point-of-sale and inventory management systems. Żabka is cooperating with authorities and has escalated the matter to its Data Protection Officer. The company is actively monitoring the situation and enhancing its security measures. 2 sources 67

Extracted Entities

Alleged Żabka Breach Exposes Jira Data, Source Code, and API Keys

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Countries (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)